EWFMGR status output - Memory used for data?

[Robert]

When EWFMGR <drive> is run, various status information is displayed.

One of the values displayed is "Memory used for data".

Does anyone know exactly what this value is? Is it simply a measure of the
RAM used by the EWF? Or is it a measure of cached (modified) data?

In our application, this value is around 6MB just after startup so I'm
curious as to whether or not this is normal. I'm trying to figure out whether
or not there's some way of seeing the amount of data in the overlay that
would get written during a "commit". I've adopted the suggestions on MSDN for
improving EWF performance (e.g. disable "last access timestamp" updates on
NTFS).

We're using EWF-RAM on CF.

Thanks.

 

[crus]

"memory used for data" is the amount of RAM that holds cached data, you
could check this copying to the protected disk some file and looking how
this memory's amount grows. If you copy to much data your system crashes!
Check in Task Manager Resources to monitor in real time how much memory you
need.
Regards Raffaele